jcollings Posted August 12, 2015 Posted August 12, 2015 We have just bought into this system and rather than give everyone a username and password we are hoping to use their LDAP connection. Has anyone done this? How do you mitigate the risk of opening your AD up to the world? The support company we work with are suggesting this could cause big security issues. Thoughts or comments please.
Steve21 Posted August 12, 2015 Posted August 12, 2015 Open LDAP ports on firewall only to their IP address (They gave us a list, but haven't actually bothered yet) Steve
Steve21 Posted August 12, 2015 Posted August 12, 2015 2. You will need to authorise our Production IP addresses to connect to the Active Directory server for security reasons. 109.107.36.200 As above from my email Steve
Edu-IT Posted August 12, 2015 Posted August 12, 2015 Are there any security risks with that? I mean, if somebody spoofed that IP?
MatthewL Posted August 12, 2015 Posted August 12, 2015 In theory if they did manage that and all you had open was LDAP that would be able to view what is in your AD.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now